Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2016:2651-1

Опубликовано: 26 окт. 2016
Источник: suse-cvrf

Описание

Security update for sssd

This update for sssd fixes one security issue and three bugs.

The following vulnerability was fixed:

  • CVE-2014-0249: Incorrect expansion of group membership when encountering a non-POSIX group. (bsc#880245)

The following non-security fixes were also included:

  • Prevent crashes of statically linked binaries using getpwuid when sssd is used and nscd is turned off or has caching disabled. (bsc#993582)
  • Add logrotate configuration to prevent log files from growing too large when running with debug mode enabled. (bsc#1004220)
  • Order sudo rules by the same logic used by the native LDAP support from sudo. (bsc#1002973)

This update was imported from the SUSE:SLE-12-SP1:Update update project.

Список пакетов

openSUSE Leap 42.1
libipa_hbac-devel-1.11.5.1-16.1
libipa_hbac0-1.11.5.1-16.1
libsss_idmap-devel-1.11.5.1-16.1
libsss_idmap0-1.11.5.1-16.1
libsss_nss_idmap-devel-1.11.5.1-16.1
libsss_nss_idmap0-1.11.5.1-16.1
libsss_sudo-1.11.5.1-16.1
python-ipa_hbac-1.11.5.1-16.1
python-sss_nss_idmap-1.11.5.1-16.1
python-sssd-config-1.11.5.1-16.1
sssd-1.11.5.1-16.1
sssd-32bit-1.11.5.1-16.1
sssd-ad-1.11.5.1-16.1
sssd-ipa-1.11.5.1-16.1
sssd-krb5-1.11.5.1-16.1
sssd-krb5-common-1.11.5.1-16.1
sssd-ldap-1.11.5.1-16.1
sssd-proxy-1.11.5.1-16.1
sssd-tools-1.11.5.1-16.1

Ссылки

Описание

The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which allows local users to bypass access restrictions via unspecified vectors.

Затронутые продукты
openSUSE Leap 42.1:libipa_hbac-devel-1.11.5.1-16.1
openSUSE Leap 42.1:libipa_hbac0-1.11.5.1-16.1
openSUSE Leap 42.1:libsss_idmap-devel-1.11.5.1-16.1
openSUSE Leap 42.1:libsss_idmap0-1.11.5.1-16.1
Ссылки